I have also found that AD credentials stop working after the initial discovery of a controller. If you manage the controller credentials after discovering a device, it disregards the domain you've entered. The audit log on the devices displays: